Red Hat Security AdvisoryRHSA-2018:2570
bind security update
Released 2018-08-27 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) bind-32:9.9.4-61.el7_5.1, bind-libs-32:9.9.4-61.el7_5.1, bind-libs-lite-32:9.9.4-61.el7_5.1 +2
- Red Hat Enterprise Linux Client Optional (v. 7) bind-32:9.9.4-61.el7_5.1, bind-chroot-32:9.9.4-61.el7_5.1, bind-devel-32:9.9.4-61.el7_5.1 +7
- Red Hat Enterprise Linux ComputeNode (v. 7) bind-32:9.9.4-61.el7_5.1, bind-libs-32:9.9.4-61.el7_5.1, bind-libs-lite-32:9.9.4-61.el7_5.1 +2
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) bind-32:9.9.4-61.el7_5.1, bind-chroot-32:9.9.4-61.el7_5.1, bind-devel-32:9.9.4-61.el7_5.1 +7
- Red Hat Enterprise Linux Server (v. 7) bind-32:9.9.4-61.el7_5.1, bind-chroot-32:9.9.4-61.el7_5.1, bind-libs-32:9.9.4-61.el7_5.1 +8
- Red Hat Enterprise Linux Server Optional (v. 7) bind-devel-32:9.9.4-61.el7_5.1, bind-devel-32:9.9.4-61.el7_5.1.ppc, bind-lite-devel-32:9.9.4-61.el7_5.1 +9
- Red Hat Enterprise Linux Workstation (v. 7) bind-32:9.9.4-61.el7_5.1, bind-chroot-32:9.9.4-61.el7_5.1, bind-libs-32:9.9.4-61.el7_5.1 +6
- Red Hat Enterprise Linux Workstation Optional (v. 7) bind-devel-32:9.9.4-61.el7_5.1, bind-lite-devel-32:9.9.4-61.el7_5.1, bind-pkcs11-devel-32:9.9.4-61.el7_5.1 +2
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) bind-32:9.9.4-61.el7_5.1, bind-chroot-32:9.9.4-61.el7_5.1, bind-libs-32:9.9.4-61.el7_5.1 +6
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) bind-devel-32:9.9.4-61.el7_5.1, bind-lite-devel-32:9.9.4-61.el7_5.1, bind-pkcs11-32:9.9.4-61.el7_5.1 +5
Fixes 1 record
Priority HIGH 67
"deny-answer-aliases" is a little-used feature intended to help recursive server operators protect end users against DNS rebinding attacks, a potential method of circumventing the security model used by client browsers.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.60236 · Published 2019-01-16 · Partial fix CWE-617
